Threat intelligence & response · Archive

Threat intelligence & response

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• InfoSec News Nuggets – 10/23/2026 ↗ (opens in a new tab)

  AboutDFIR – The Definitive Compendium Project · Published 2026-10-23 · First collected 2026-10-24

• Forensic Focus Digest, 23 Oct 2026 ↗ (opens in a new tab)

  Forensic Focus · Published 2026-10-23 · First collected 2026-10-24

• Field Notes: Reconstructing an Attacker’s Workflow ↗ (opens in a new tab)

  dfir.ch · Published 2026-10-22 · First collected 2026-10-24

• Discovering a Backdoor and Flaws in More Encrypted USB Drives ↗ (opens in a new tab)

  Binary Ninja · Published 2026-10-22 · First collected 2026-10-24

• Update: onedump.py Version 0.0.3 ↗ (opens in a new tab)

  Didier Stevens · Published 2026-10-12 · First collected 2026-10-24

• A quick RE benchmark of le chonk ↗ (opens in a new tab)

  MALCAT · Published 2026-10-07 · First collected 2026-10-24

• Threat Intel: Alinubx.sys. The Renamed CcProtect Driver Behind a 40-Brand Malware-as-a-Service Campaign ↗ (opens in a new tab)

  Delphos Labs · Published 2026-09-22 · First collected 2026-10-24

• Linesignal ↗ (opens in a new tab)

  Reverse Engineering · Published 2026-09-21 · First collected 2026-10-24

• Reverse Engineering Burp Project Format ↗ (opens in a new tab)

  Hackerman's Hacking Tutorials · Published 2026-09-07 · First collected 2026-10-24

• Hey Siri, welcome to my Minecraft server ↗ (opens in a new tab)

  zerotistic · Published 2026-09-04 · First collected 2026-10-24

• Don't Let Abliteration Abliterate Your Bug Hunting: Discovering Verdict Bias in Uncensored Models ↗ (opens in a new tab)

  clearbluejar · Published 2026-09-01 · First collected 2026-10-24

• BengalSEO Part 1: Anatomy of the Operation ↗ (opens in a new tab)

  The DFIR Report · Published 2026-08-24 · First collected 2026-10-24

• RedNova: From arbitrary file write to command execution using COM in windows ↗ (opens in a new tab)

  Sud0Ru · Published 2026-08-23 · First collected 2026-10-24

• Fine-Tuning LFM2.5-1.2B for a Grid Navigation Task ↗ (opens in a new tab)

  Dino Hacks · Published 2026-08-08 · First collected 2026-10-24

• CILFI: Automatic Function Identification in .NET Binaries ↗ (opens in a new tab)

  Washi · Published 2026-08-04 · First collected 2026-10-24

• Static Devirtualization of Tencent VM ↗ (opens in a new tab)

  Blog Posts on Aftermath Labs · Published 2026-07-31 · First collected 2026-10-24

• Unlock the Motorola Moto G05 / G15 ↗ (opens in a new tab)

  R0rt1z2 · Published 2026-07-12 · First collected 2026-10-24

• sekaictf 2026 infra writeup ↗ (opens in a new tab)

  es3n1n's blog · Published 2026-06-29 · First collected 2026-10-24

• Speculative Telemetry ↗ (opens in a new tab)

  Joe T. Sylve, Ph.D. · Published 2026-06-12 · First collected 2026-10-24

• Flicker and fall: rooting the Philips Hue Bridge both remotely and wirelessly ↗ (opens in a new tab)

  THALIUM · Published 2026-06-08 · First collected 2026-10-24

• Static Devirtualization of Themida ↗ (opens in a new tab)

  Naci’s blog · Published 2026-05-09 · First collected 2026-10-24

• Flare-On 12 – Task 8 ↗ (opens in a new tab)

  hasherezade's 1001 nights · Published 2025-11-25 · First collected 2026-10-24

• Amped Podcast Episode 4 – User Needs, Forensic Minds: How New Features Are Born ↗ (opens in a new tab)

  Forensic Focus · Published 2026-10-22 · First collected 2026-10-24

• InfoSec News Nuggets – 10/22/2026 ↗ (opens in a new tab)

  AboutDFIR – The Definitive Compendium Project · Published 2026-10-22 · First collected 2026-10-24

• 6.0 Release 2 ↗ (opens in a new tab)

  Binary Ninja · Published 2026-10-20 · First collected 2026-10-24

• Field Notes: EtherRAT Distributed Through a Legitimate Intune Workflow ↗ (opens in a new tab)

  dfir.ch · Published 2026-10-13 · First collected 2026-10-24

• Overview of Content Published in September ↗ (opens in a new tab)

  Didier Stevens · Published 2026-10-01 · First collected 2026-10-24

• Delphos Lantern scores #1 on BinaryAudit backdoor detection: by mean, peak, floor, and reproducibility ↗ (opens in a new tab)

  Delphos Labs · Published 2026-09-16 · First collected 2026-10-24

• Reverse-engineering Find My People to stalk my ex a friend, cause I can ↗ (opens in a new tab)

  zerotistic · Published 2026-08-19 · First collected 2026-10-24

• It's a pre-auth, stupid! ↗ (opens in a new tab)

  Reverse Engineering · Published 2026-07-29 · First collected 2026-10-24